search

bartekbp / blog

8 stars 4 forks source link

Refresh Token #2

Open Romiko opened 4 years ago

Romiko commented 4 years ago

Hi,

We use service workers to queue requests if the phone is off line. Currently we use a long lived access token. We now need to use a short lived token. How can the solution refresh tokens automatically without redirecting the user to the login screen? So when they come online, the v service worker can get a refreshed access token? We using Oauth 2 and openid.

Great blog!

bartekbp commented 4 years ago

Hi!

It took me some time to think about this problem. Sorry about that.

I'm not familiar with OAuth2 and OpenID, but it looks like a use case for a refresh token https://auth0.com/learn/refresh-tokens/. Would that work?